$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft File: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft (raw, json) Hash identifier: 2BUZfWaak++Nl3+PLP1/rbaTPcDZd2h745jIqGWQLPI= Subject key identifier: 37:AE:99:3A:AA:30:C7:D5:8A:69:02:9E:AD:46:0B:11:71:C7:80:CA Authority key identifier: CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 Certificate issuer: /CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Certificate serial: 7654FD702339E54A74AC60CE3E0A5541A69CC2E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft Manifest number: BB Signing time: Thu 01 May 2025 19:50:41 +0000 Manifest this update: Thu 01 May 2025 19:45:41 +0000 Manifest next update: Sun 04 May 2025 22:44:41 +0000 Files and hashes: 1: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl (hash: Onb9g0dhe7hxfWo/lNhRzmKfMp40WhV73AY0wEBz180=) 2: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: lS5KueYMn8bh5TmvZ4yUXAkTqzodamQRrumfFCdScxY=) 3: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: O3gcBChIby3AdjPp6ABgzZyB6Dva+5HT0HMij4bC+80=) 4: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: jXxQ64IynNf9UaROvNwdTvfTlkwJClGyFCLy03gvgpE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 22:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:54:fd:70:23:39:e5:4a:74:ac:60:ce:3e:0a:55:41:a6:9c:c2:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Validity Not Before: May 1 19:45:41 2025 GMT Not After : May 4 22:44:41 2025 GMT Subject: CN=37AE993AAA30C7D58A69029EAD460B1171C780CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:42:64:6b:f7:b5:cd:ed:33:2c:ab:41:24:a5: af:de:cb:63:42:67:95:ed:53:11:40:04:fa:0b:48: e3:b5:95:0f:84:9b:a1:ab:f5:2d:d0:4b:6b:a1:4b: b3:0a:a6:36:1f:16:1a:70:ed:1a:63:5b:61:2c:30: d5:64:56:95:23:52:9e:8b:63:84:d5:e2:77:e9:d0: 08:70:c6:2a:d1:d4:34:3e:c7:47:e8:60:76:c4:10: 07:91:37:83:d0:d2:fd:b8:ab:ca:0c:9c:24:92:23: 31:aa:93:de:34:c4:64:37:c7:a5:17:c0:8a:2e:cf: f2:24:5f:a4:1b:72:3d:8b:e8:38:32:55:22:e1:9c: b6:c4:cf:29:89:21:6d:3e:35:58:c5:32:fe:7b:c2: 06:ba:f3:af:8c:7c:45:c9:8e:52:df:6f:b3:87:7f: dd:a6:8d:9b:3f:ea:4f:80:9a:d0:3e:d9:ca:2d:31: 79:62:7b:20:e0:02:4b:04:4b:bf:3f:92:ec:aa:6a: 0b:ae:53:c8:80:fc:02:26:7f:46:88:53:7f:a8:aa: 87:38:73:03:37:d9:cb:30:be:ea:c7:ac:de:fb:76: 86:62:a2:0c:15:ee:9c:1b:14:b8:6d:47:71:ed:4f: 4e:bb:1c:d3:7c:0a:01:1b:43:2c:28:d9:ab:40:20: c3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AE:99:3A:AA:30:C7:D5:8A:69:02:9E:AD:46:0B:11:71:C7:80:CA X509v3 Authority Key Identifier: keyid:CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:98:f0:22:44:34:37:12:e8:0f:d9:21:33:8f:9c:ff:89:9c: fc:4c:42:33:93:24:79:55:1e:9f:35:5f:a4:cd:31:8a:be:65: 68:e2:60:45:6a:c0:ea:a3:f6:bd:ab:32:ba:08:19:01:5d:25: b9:32:b5:e9:82:a6:8f:08:85:30:24:75:e6:b1:ec:45:15:56: c5:1c:3c:cd:01:b1:99:e0:2e:7e:bd:58:42:df:8a:7e:34:67: 19:c3:c7:c2:37:22:92:2e:52:93:a5:1e:3d:91:90:06:ee:79: 3a:d6:a4:bb:71:66:47:e4:d4:48:54:02:f7:3a:93:d5:e3:50: a6:f8:38:ae:65:4a:9b:62:18:7d:3e:74:c8:ba:d1:b9:f5:20: fd:68:d0:a6:b7:e8:37:c5:74:fb:f2:de:02:fb:64:50:23:5c: 7a:71:1d:71:58:5e:42:c1:bb:72:da:6e:35:d9:38:e9:5d:87: b7:b2:66:9d:53:b0:1c:af:ed:14:83:a0:c3:67:08:88:00:28: e9:09:31:c9:ef:14:01:bb:22:6c:7d:70:5f:cd:10:e6:80:72: bb:22:18:4a:a1:70:a5:17:83:f2:40:bd:7a:4c:09:87:a9:ea: 13:cc:e8:c4:d0:9c:36:05:7c:92:38:c5:f9:b0:4b:f9:58:4e: a4:8a:99:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdlT9cCM55Up0rGDOPgpVQaacwuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJF MzlCRjhFODAeFw0yNTA1MDExOTQ1NDFaFw0yNTA1MDQyMjQ0NDFaMDMxMTAvBgNV BAMTKDM3QUU5OTNBQUEzMEM3RDU4QTY5MDI5RUFENDYwQjExNzFDNzgwQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtQmRr97XN7TMsq0Ekpa/ey2NC Z5XtUxFABPoLSOO1lQ+Em6Gr9S3QS2uhS7MKpjYfFhpw7RpjW2EsMNVkVpUjUp6L Y4TV4nfp0AhwxirR1DQ+x0foYHbEEAeRN4PQ0v24q8oMnCSSIzGqk940xGQ3x6UX wIouz/IkX6Qbcj2L6DgyVSLhnLbEzymJIW0+NVjFMv57wga686+MfEXJjlLfb7OH f92mjZs/6k+AmtA+2cotMXlieyDgAksES78/kuyqaguuU8iA/AImf0aIU3+oqoc4 cwM32cswvurHrN77doZiogwV7pwbFLhtR3HtT067HNN8CgEbQywo2atAIMObAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN66ZOqowx9WKaQKerUYLEXHHgMowHwYDVR0j BBgwFoAUy1TcUm+iFPn3NpJuaqoWq+Ob+OgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMC9DQjU0REM1MjZG QTIxNEY5RjczNjkyNkU2QUFBMTZBQkUzOUJGOEU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJFMzlC RjhFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzAvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2 QUJFMzlCRjhFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyY8CJENDcS6A/ZITOPnP+JnPxMQjOTJHlV Hp81X6TNMYq+ZWjiYEVqwOqj9r2rMroIGQFdJbkytemCpo8IhTAkdeax7EUVVsUc PM0BsZngLn69WELfin40ZxnDx8I3IpIuUpOlHj2RkAbueTrWpLtxZkfk1EhUAvc6 k9XjUKb4OK5lSptiGH0+dMi60bn1IP1o0Ka36DfFdPvy3gL7ZFAjXHpxHXFYXkLB u3LabjXZOOldh7eyZp1TsByv7RSDoMNnCIgAKOkJMcnvFAG7Imx9cF/NEOaAcrsi GEqhcKUXg/JAvXpMCYep6hPM6MTQnDYFfJI4xfmwS/lYTqSKmbY= -----END CERTIFICATE-----Generated at Thu May 1 22:24:44 2025 by rpki-client